Product by Go
Github.com/opencontainers/runc
13 known vulnerabilities in Github.com/opencontainers/runc (Go), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-30465 | The Linux Foundation runc: Path Traversal | 8.5 | |
| High | CVE-2019-16884 | The Linux Foundation runc: security vulnerability | 7.5 | |
| High | CVE-2025-52565 | container escape due to /dev/console mount and related races | 7.5 | |
| Medium | CVE-2021-43784 | Opencontainers Runc: Integer Overflow or Wraparound | 6.0 | |
| High | CVE-2023-27561 | The Linux Foundation runc: Improper Access Control | 7.0 | |
| High | CVE-2016-3697 | Docker: Privilege Escalation | 7.8 | |
| High | CVE-2019-19921 | The Linux Foundation runc: Improper Access Control | 7.0 | |
| Medium | CVE-2016-9962 | Docker: security vulnerability | 6.4 | |
| High | CVE-2022-29162 | Incorrect Default Permissions in runc | 5.9 | |
| High | CVE-2023-28642 | AppArmor bypass with symlinked /proc in runc | 6.1 | |
| Low | CVE-2026-41579 | runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations | 3.3 | |
| Medium | CVE-2023-25809 | rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc | 5.0 | |
| Low | CVE-2024-45310 | runc can be confused to create empty files/directories on the host | 3.6 |